Move identity selection based on non-standard headers into (new) identity_select plugin (#1488553)
Fix XSS vulnerability when saving HTML signatures (#1489251)